high8.8
CVE-2019-3718
Dell SupportAssist Client versions prior to 3.2.0.90 contain an improper origin validation vulnerability.
Impact
Dell SupportAssist Client versions prior to 3.2.0.90 contain an improper origin validation vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to attempt CSRF attacks on users of the impacted systems.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Supportassist | before 3.2.0.90 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/108020
- https://www.dell.com/support/article/us/en/19/sln316857/dsa-2019-051-dell-supportassist-client-multiple-vulnerabilities?lang=en
- http://www.securityfocus.com/bid/108020
- https://www.dell.com/support/article/us/en/19/sln316857/dsa-2019-051-dell-supportassist-client-multiple-vulnerabilities?lang=en